1
0
forked from pool/jetty-minimal

Accepting request 893214 from home:susnux:branches:Java:packages

Update to version 9.4.40.v20210413

OBS-URL: https://build.opensuse.org/request/show/893214
OBS-URL: https://build.opensuse.org/package/show/Java:packages/jetty-minimal?expand=0&rev=31
This commit is contained in:
2021-05-14 17:18:17 +00:00
committed by Git OBS Bridge
parent 02625aecdd
commit 208ad0757d
6 changed files with 38 additions and 11 deletions

View File

@@ -1,3 +1,13 @@
-------------------------------------------------------------------
Fri May 14 17:01:58 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 9.4.40.v20210413
* Fix: CVE-2021-28165 - jetty server high CPU when client send
data length > 17408
* Fix: CVE-2021-28164 - Normalize ambiguous URIs
* Fix: CVE-2021-28163 - Exclude webapps directory from deployment
scan
-------------------------------------------------------------------
Fri Mar 12 11:11:07 UTC 2021 - Fridrich Strba <fstrba@suse.com>